
via News – MySmartPrice https://ift.tt/2SFnlqu
- We have confirmed that the bug impacted approximately 52.5 million users in connection with a Google+ API.Google says that ahead of the closure of the consumer Google+, in the coming months it will provide users with additional information on how to safely and securely download and migrate their data off of the platform. In the end, Google also reiterated on its original reasoning behind the sunsetting of Google+, which is because of "the significant challenges involved in maintaining a successful product that meets consumers’ expectations, as well as the platform’s low usage."
- With respect to this API, apps that requested permission to view profile information that a user had added to their Google+ profile—like their name, email address, occupation, age (full list here)—were granted permission to view profile information about that user even when set to not-public.
- In addition, apps with access to a user's Google+ profile data also had access to the profile data that had been shared with the consenting user by another Google+ user but that was not shared publicly.
- The bug did not give developers access to information such as financial data, national identification numbers, passwords, or similar data typically used for fraud or identity theft.
- No third party compromised our systems, and we have no evidence that the developers who inadvertently had this access for six days were aware of it or misused it in any way.